cayu.resource_access

Public Cayu API. Definitions are grouped by their public source module, and definitions from private implementation modules appear on their package’s page; adding a symbol does not move existing links. The import shown at each entry is a supported public namespace. Read the Python API overview and install the required extra.

ResourceAccessDecision

from cayu import ResourceAccessDecision

A versioned, optionally expiring decision from the trusted policy service.

Decorators: @dataclass(frozen=True, slots=True).

Fields and attributes

Defaults below are source expressions; Field(...) includes schema/validation settings and default_factory creates a fresh value. Inherited declarations are included. Constructor behavior follows the model or dataclass shown in the bases/decorators.

Name	Type	Default
grant	ResourceAccessGrant | SessionAccessScope	required
revision	int	required
valid_until	datetime | None	None

Release source · Runtime guarantees · Capability guides

ResourceAccessGrant

from cayu import ResourceAccessGrant

Separate application grants for each resource family; omitted families deny.

Decorators: @dataclass(frozen=True, slots=True).

Fields and attributes

Defaults below are source expressions; Field(...) includes schema/validation settings and default_factory creates a fresh value. Inherited declarations are included. Constructor behavior follows the model or dataclass shown in the bases/decorators.

Name	Type	Default
sessions	SessionAccessScope | None	None
tasks	SessionAccessScope | None	None
artifacts	SessionAccessScope | None	None
knowledge	SessionAccessScope | None	None

Release source · Runtime guarantees · Capability guides

ResourceAccessPolicy

from cayu import ResourceAccessPolicy

Trusted host authority. Resolve on every boundary; no Runtime policy cache.

Bases: ABC.

authority (property)

ResourceAccessPolicy.authority() -> str

resolve (method)

async ResourceAccessPolicy.resolve(subject: str) -> ResourceAccessDecision | ResourceAccessGrant | SessionAccessScope

Release source · Runtime guarantees · Capability guides

ScopedCayuAccess

from cayu import ScopedCayuAccess

Application-admitted access; construct through await app.access(subject).

The subject must already be authenticated by the host. HTTP bodies, model arguments and serialized bindings are never inputs to this constructor.

init (method)

ScopedCayuAccess.__init__(app, binding)

sessions (property)

ScopedCayuAccess.sessions()

tasks (property)

ScopedCayuAccess.tasks()

knowledge (method)

ScopedCayuAccess.knowledge(*, access_scope=None)

artifacts (method)

ScopedCayuAccess.artifacts(store, *, environment_name: str)

run (method)

async ScopedCayuAccess.run(request)

resume (method)

async ScopedCayuAccess.resume(request)

recover (method)

async ScopedCayuAccess.recover(request)

enqueue_session_message (method)

async ScopedCayuAccess.enqueue_session_message(request, *, context)

inspect_session_messages (method)

async ScopedCayuAccess.inspect_session_messages(query, *, context)

apply_session_message_action (method)

async ScopedCayuAccess.apply_session_message_action(request, *, context)

snapshot_session_message_source (method)

async ScopedCayuAccess.snapshot_session_message_source(session_id, *, context)

append_peer_content (method)

async ScopedCayuAccess.append_peer_content(request, *, context)

revalidate_delivery (method)

async ScopedCayuAccess.revalidate_delivery(event)

fork (method)

async ScopedCayuAccess.fork(request)

Release source · Runtime guarantees · Capability guides